security.ids.snort.bleedingsnort (thread)

Turbosnort Score -- Our best yet!, Matt Jonkman
- Re: Turbosnort Score -- Our best yet!, Jeff Kell
Help extracting destination ip address (hex), Virendra Rode
Re: [LP-analysts] Executable Analysis, David Glosser
DNS-BH 7/26 Malware Additions, David Glosser
FP for Potential MS05-036 exploit -- PNG with embedded ICC document,Sig ID,2002124, Russell Fulton
- Re: FP for Potential MS05-036 exploit -- PNG with embedded ICC document,Sig ID,2002124, Erik Fichtner
  - Re: FP for Potential MS05-036 exploit -- PNG with embedded ICC document,Sig ID,2002124, Matt Jonkman
confirm.11111011111.biz, David Glosser
- Re: confirm.11111011111.biz, David Glosser
Internet Explorer Javaprxy.dll Heap Overflow, Blake Hartstein
- RE: Internet Explorer Javaprxy.dll Heap Overflow, M. Shirk
  - RE: Internet Explorer Javaprxy.dll Heap Overflow, Frank Knobbe
    - RE: Internet Explorer Javaprxy.dll Heap Overflow, M. Shirk
    - Re: Internet Explorer Javaprxy.dll Heap Overflow, Jason
Evading Rules - Remote Code Execution, Blake Hartstein
Logo Selection, Matt Jonkman
- Re: Logo Selection, Sam Evans
Spyware Listening Post Update, Matt Jonkman
User agent updates, Matt Jonkman
- Re: User agent updates, Matt Jonkman
  - Re: User agent updates, Reg Quinton
    - Re: [Possible SPAM] Re: User agent updates, Jeff Kell
    - Re: [Possible SPAM] Re: User agent updates, Matt Jonkman
    - Re: [Possible SPAM] Re: User agent updates, Reg Quinton
    - Re: User agent updates, Matt Jonkman
Updated Games sigs, Matt Jonkman
WoW rules -- not confirmed, Ron
ms05-036 false positives, updated rules., Erik Fichtner
- Re: ms05-036 false positives, updated rules., Frank Knobbe
  - Re: ms05-036 false positives, updated rules., Erik Fichtner
    - Re: ms05-036 false positives, updated rules., Frank Knobbe
ms05-036 GetColorProfileElement overflow, Erik Fichtner
- Re: ms05-036 GetColorProfileElement overflow, Frank Knobbe
New signatures: Oracle Reports vulnerabilites, Frank Knobbe
Malware DNS-BH Additions 7/20, David Glosser
Bleeding Snort in Information Security Magazine, Matt Jonkman
- Re: Bleeding Snort in Information Security Magazine, Wes Young
New sig: Cacti Input Validation Attack, Frank Knobbe
Duplicate SIDs fixed, Frank Knobbe
MyTob.HE sigs added, Frank Knobbe
- Re: MyTob.HE sigs added, Frank Knobbe
MS05-036, Erik Fichtner
- Re: MS05-036, Frank Knobbe
- Re: MS05-036, Jeff Kell
  - Re: MS05-036, Erik Fichtner
    - Re: MS05-036, Erik Fichtner
    - Re: MS05-036, Jeff Kell
    - Re: MS05-036, Erik Fichtner
New Category, Matt Jonkman
WPS Sig, Matt Jonkman
Turbosnort Stats, Matt Jonkman
Firefox Set Wallpaper Code Execution, Blake Hartstein
My plea to bleeder snort leaders: fight the anti-terror fight!, Billy B. Bilano
socks pattern, Virendra Rode
7/13 Malware Black Hole DNS Additions, David Glosser
Re: Terrorism signatures, Al Berg
- RE: Re: Terrorism signatures, Jeff Dell
- Re: Re: Terrorism signatures, Matt Jonkman
  - Re: Re: Terrorism signatures, Wes Young
    - Re: Re: Terrorism signatures, John Whelan
- Re: Re: Re: Terrorism signatures, Vlad
Any thoughts on these sigs - proxy related, Virendra Rode
- Re: Any thoughts on these sigs - proxy related, Frank Knobbe
  - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Frank Knobbe
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Frank Knobbe
    - Re: Any thoughts on these sigs - proxy related, Matt Jonkman
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Matt Jonkman
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Frank Knobbe
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
    - Re: Any thoughts on these sigs - proxy related, Virendra Rode
Web-IIS ASP.net Auth Bypass / Canonicalization - False Negatives, Blake Hartstein
- Re: Web-IIS ASP.net Auth Bypass / Canonicalization - False Negatives, Frank Knobbe
Transparent Proxy Rule?, Virendra Rode
- Re: Transparent Proxy Rule?, Matt Jonkman
  - Re: Transparent Proxy Rule?, Virendra Rode
    - Re: Transparent Proxy Rule?, Erik Fichtner
    - Re: Transparent Proxy Rule?, Virendra Rode
    - Re: Transparent Proxy Rule?, Erik Fichtner
    - Re: Transparent Proxy Rule?, Virendra Rode
    - Re: Transparent Proxy Rule?, Virendra Rode
New questions on old signatures, Frank Knobbe
London Trojan Sig, M. Shirk
- Re: London Trojan Sig, Matt Jonkman
Revisions of 2000328 (SMTP check), Jeff Kell
- Re: Revisions of 2000328 (SMTP check), Matt Jonkman
  - Re: Revisions of 2000328 (SMTP check), Frank Knobbe
    - Re: Revisions of 2000328 (SMTP check), Jeff Kell
Malware Black Hole DNS Additions 7/7, David Glosser
IRC state machine, Robert Kerr
- Re: IRC state machine, Matt Jonkman
  - Re: IRC state machine, Erik Fichtner
    - Re: IRC state machine, Matt Jonkman
phpBB Remote Code Execution Attempt, Blake Hartstein
- Re: phpBB Remote Code Execution Attempt, Matt Jonkman
  - Re: Re: phpBB Remote Code Execution Attempt, Erik Fichtner
    - Re: Re: phpBB Remote Code Execution Attempt, Matt Jonkman
- Re: phpBB Remote Code Execution Attempt, Frank Knobbe
  - Re: phpBB Remote Code Execution Attempt, Blake Hartstein
    - Re: phpBB Remote Code Execution Attempt, Frank Knobbe
- RE: phpBB Remote Code Execution Attempt, M. Shirk
  - Re: phpBB Remote Code Execution Attempt, Matt Jonkman
Unknown Malware, Matt Jonkman
List clogged, Matt Jonkman
- List clogged, Matt Jonkman
Terrorism Signature, Matt Jonkman
- Re: Terrorism Signature, Jim O'Gorman
  - Re: Terrorism Signature, Matt Jonkman
- Terrorism Signature, Richard Bejtlich
  - Re: Terrorism Signature, Matt Jonkman
    - Re: Terrorism Signature, Wes Young
  - Re: Terrorism Signature, Frank Knobbe
  - Re: Terrorism Signature, Frank Knobbe
    - Re: Terrorism Signature, Jim O'Gorman
    - Re: Terrorism Signature -- final word, Frank Knobbe
    - Re: Terrorism Signature -- final word, Matt Jonkman
    - Re: Terrorism Signature, Andre Ludwig
- Terrorism Signature, Richard Bejtlich
  - Re: Terrorism Signature, Matt Jonkman
  - Re: Terrorism Signature, Frank Knobbe
OSSRC IRC Chat, Matt Jonkman
A scan I've never seen before..., Jeff Kell
User Agent strangeness, Matt Jonkman
More Spyware Listening Post Collected Data, Matt Jonkman
- Re: More Spyware Listening Post Collected Data, Reg Quinton
  - Re: More Spyware Listening Post Collected Data, Frank Knobbe
    - Re: More Spyware Listening Post Collected Data, David Glosser
    - Re: More Spyware Listening Post Collected Data, Frank Knobbe
New Blog sig and User Agents, Matt Jonkman
Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
- Bleeding Snort Daily Signature Changes, bleeding-WwB1pFISwSmd/xkhVkNGTgC/G2K4zDHf
Re: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCCBuffer Overflow,Sig ID,2000329, Russell Fulton
- Re: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCCBuffer Overflow,Sig ID,2000329, Erik Fichtner
  - Re: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12 DCCBuffer Overflow,Sig ID,2000329, Matt Jonkman
    - RE: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12DCCBuffer Overflow,Sig ID,2000329, Jeff Dell
- Re: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12, Jeff Kell
  - Re: false +ve for BLEEDING-EDGE EXPLOIT mIRC <=6.12, Matt Jonkman